Deep Malware Analysis of 3d56d4cceed34eb88019d0448561bc4d | md5: 3d56d4cceed34eb88019d0448561bc4d | Javascript | T1059.007 | PowerShell | Powershell: Hidden Execution | T1059.001 | T1027 | DeObfuscated | T1105

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	3d56d4cceed34eb88019d0448561bc4d
Sha1	7f693495acb03a7f506d0f08887e666b8c842798
Sha256	ad14500239f169e7bfc73631801f630103f10ed7c93c066e268b46ee557231b8
Sha384	df4f6c41d5ed7943f027223570fd4142e30f30233fbcc11012de9a22b5c949547fd6f389b864523e9fdac64adbf397f8
Sha512	0b33e1a51e67b7142b5965f832049497e427ce8a2b7afe693d9a047eb86832578a01a109b94ff3ef5b0cd8bacb7c805a801e082d43020074fcfeb1b7ed44eb75
SSDeep	3072:yyeNCNYCqCCYCMYC7YeTC3sCzye/C4qCiYeTC4WCrCCYCubCpyefCMbC9IeTC4qI:k
TLSH	02A3364B29446EEC4D19503803160DCBC2537F1BA7E7E35A70E93735E22D6EB19ABD28

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:ps1~T1027~T1059.001~T1059.007~T1105

Shape scr:ps1

malicious 1 nodes

Config. Field	Value
URL in PowerShell #1	https:huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

URL in PowerShell #1 URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential